Bug 2176775 - [17.1][OVN][HWOFFLOAD][CONNTRACK][TRANSPARENT VLAN] Security groups not working with transparent vlan ports
Summary: [17.1][OVN][HWOFFLOAD][CONNTRACK][TRANSPARENT VLAN] Security groups not worki...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openvswitch
Version: 17.1 (Wallaby)
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: z1
: ---
Assignee: Slawek Kaplonski
QA Contact: Eran Kuris
URL:
Whiteboard:
Depends On: 2188663
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-03-09 09:36 UTC by Miguel Angel Nieto
Modified: 2023-08-09 06:39 UTC (History)
13 users (show)

Fixed In Version:
Doc Type: Known Issue
Doc Text:
Clone Of:
: 2188663 (view as bug list)
Environment:
Last Closed: 2023-07-26 15:46:09 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FD-2795 0 None None None 2023-04-04 07:32:41 UTC
Red Hat Issue Tracker NFV-2796 0 None None None 2023-04-13 09:52:36 UTC
Red Hat Issue Tracker OSP-22993 0 None None None 2023-03-09 09:37:41 UTC

Description Miguel Angel Nieto 2023-03-09 09:36:10 UTC 
Description of problem:

Same issue than the one described for 16.2
https://bugzilla.redhat.com/show_bug.cgi?id=2167839

I tried --allowed-address as suggested https://bugzilla.redhat.com/show_bug.cgi?id=2167839#c4, but it didnt work either. When disabling port security and security group, then it worked

*****************
VMS
*****************
(overcloud) [stack@undercloud-0 ~]$ openstack server list --all-projects
+--------------------------------------+------------------------------------------+--------+-----------------------------------------------------+----------------------------------------+--------------------+
| ID                                   | Name                                     | Status | Networks                                            | Image                                  | Flavor             |
+--------------------------------------+------------------------------------------+--------+-----------------------------------------------------+----------------------------------------+--------------------+
| 59d039e8-00d3-4e46-8e66-5ba6526ecee5 | tempest-TestNfvOffload-server-2093249532 | ACTIVE | mellanox-vlan-provider=192.168.39.72, 30.30.220.154 | rhel-guest-image-8.7-1660.x86_64.qcow2 | nfv_qe_base_flavor |
| c601027a-c8a3-4dfa-b288-3bc96f16c2f1 | tempest-TestNfvOffload-server-79876674   | ACTIVE | mellanox-vlan-provider=192.168.39.97, 30.30.220.139 | rhel-guest-image-8.7-1660.x86_64.qcow2 | nfv_qe_base_flavor |
+--------------------------------------+------------------------------------------+--------+-----------------------------------------------------+----------------------------------------+--------------------+

**************************
Vms interfaces
**************************
[cloud-user@tempest-testnfvoffload-server-2093249532 ~]$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc mq state UP group default qlen 1000
    link/ether fa:16:3e:56:cb:fe brd ff:ff:ff:ff:ff:ff
    altname enp4s0
    inet 30.30.220.154/24 brd 30.30.220.255 scope global dynamic noprefixroute eth0
       valid_lft 42891sec preferred_lft 42891sec
    inet6 fe80::f816:3eff:fe56:cbfe/64 scope link 
       valid_lft forever preferred_lft forever
3: eth0.38@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 8996 qdisc noqueue state UP group default qlen 1000
    link/ether fa:16:3e:56:cb:fe brd ff:ff:ff:ff:ff:ff
    inet 60.60.220.102/24 scope global eth0.38
       valid_lft forever preferred_lft forever
    inet6 fe80::f816:3eff:fe56:cbfe/64 scope link 
       valid_lft forever preferred_lft forever

[cloud-user@tempest-testnfvoffload-server-79876674 ~]$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc mq state UP group default qlen 1000
    link/ether fa:16:3e:20:27:69 brd ff:ff:ff:ff:ff:ff
    altname enp4s0
    inet 30.30.220.139/24 brd 30.30.220.255 scope global dynamic noprefixroute eth0
       valid_lft 40952sec preferred_lft 40952sec
    inet6 fe80::f816:3eff:fe20:2769/64 scope link 
       valid_lft forever preferred_lft forever
3: eth0.38@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 8996 qdisc noqueue state UP group default qlen 1000
    link/ether fa:16:3e:20:27:69 brd ff:ff:ff:ff:ff:ff
    inet 60.60.220.101/24 scope global eth0.38
       valid_lft forever preferred_lft forever
    inet6 fe80::f816:3eff:fe20:2769/64 scope link 
       valid_lft forever preferred_lft forever

*****************************
Create allowed-address ports
*****************************
openstack port create --network dc3c361e-da84-4391-b5de-20620e3702d6 --allowed-address mac-address=fa:16:3e:56:cb:fe,ip-address=60.60.220.102/24  7f44fda8-74ee-43ae-a334-5e9387653bc0
openstack port create --network dc3c361e-da84-4391-b5de-20620e3702d6 --allowed-address mac-address=fa:16:3e:20:27:69,ip-address=60.60.220.101/24  dd3038e8-0bdc-4b44-9ad0-d10af4f4fb91


******************************
ports
******************************
(overcloud) [stack@undercloud-0 ~]$ openstack port list
+--------------------------------------+--------------------------------------+-------------------+------------------------------------------------------------------------------+--------+
| ID                                   | Name                                 | MAC Address       | Fixed IP Addresses                                                           | Status |
+--------------------------------------+--------------------------------------+-------------------+------------------------------------------------------------------------------+--------+
| 1b7234e0-7b89-4f5e-ba25-7819666521c5 | 7f44fda8-74ee-43ae-a334-5e9387653bc0 | fa:16:3e:b0:9b:c7 | ip_address='60.60.220.166', subnet_id='b98d57fe-8c86-4091-88a4-baaa51f37391' | DOWN   |
| 7adc1505-cf63-4a63-863e-ab1510c96eb6 |                                      | fa:16:3e:f6:db:91 | ip_address='60.60.220.100', subnet_id='b98d57fe-8c86-4091-88a4-baaa51f37391' | DOWN   |
| 7c58fdbd-72cb-49d6-8331-8de9c3d9a882 |                                      | fa:16:3e:a7:3a:5f | ip_address='30.30.220.100', subnet_id='ee1f1f1b-89fb-4b6a-babf-16698c4f59e7' | DOWN   |
| 7f44fda8-74ee-43ae-a334-5e9387653bc0 | tempest-port-smoke-1313654749        | fa:16:3e:56:cb:fe | ip_address='30.30.220.154', subnet_id='ee1f1f1b-89fb-4b6a-babf-16698c4f59e7' | ACTIVE |
| 95e79eee-d50f-4359-9fa0-a4312f04fccc |                                      | fa:16:3e:c9:48:7f | ip_address='192.168.39.72', subnet_id='b1f29391-6757-4150-877d-db0b56d14541' | N/A    |
| b1623af4-d983-479d-8694-f8b34b226617 |                                      | fa:16:3e:d8:89:4e | ip_address='60.60.220.254', subnet_id='b98d57fe-8c86-4091-88a4-baaa51f37391' | ACTIVE |
| bb1ead02-f3e4-4163-a7d0-3e65ceee7c04 |                                      | fa:16:3e:38:be:b3 | ip_address='192.168.39.86', subnet_id='b1f29391-6757-4150-877d-db0b56d14541' | ACTIVE |
| c7503430-a44b-40da-8259-8f5f724bef92 | dd3038e8-0bdc-4b44-9ad0-d10af4f4fb91 | fa:16:3e:52:74:02 | ip_address='60.60.220.135', subnet_id='b98d57fe-8c86-4091-88a4-baaa51f37391' | DOWN   |
| dd3038e8-0bdc-4b44-9ad0-d10af4f4fb91 | tempest-port-smoke-1694520839        | fa:16:3e:20:27:69 | ip_address='30.30.220.139', subnet_id='ee1f1f1b-89fb-4b6a-babf-16698c4f59e7' | ACTIVE |
| e15aebd2-775a-439f-b2f0-cf9898b542e7 |                                      | fa:16:3e:b1:1f:13 | ip_address='30.30.220.254', subnet_id='ee1f1f1b-89fb-4b6a-babf-16698c4f59e7' | ACTIVE |
| e810b892-4f8b-4306-949e-8852c533a2c7 |                                      | fa:16:3e:be:00:31 | ip_address='192.168.39.97', subnet_id='b1f29391-6757-4150-877d-db0b56d14541' | N/A    |
+--------------------------------------+--------------------------------------+-------------------+------------------------------------------------------------------------------+--------+


Version-Release number of selected component (if applicable):
RHOS-17.1-RHEL-9-20230301.n.1(

How reproducible:
1. Deploy onv hwoffload setup enabling transparent vlan in the configuration. The configuration I used is with DVR, but I would say this is unrelated
2. Deploy 2 vms with a geneve port/vlan and a transparent vlan port
3. ping from one vm to the other one using transparent vlan port


Actual results:
ping is not working in transparent vlan ports even if security groups allow it


Expected results:
Security groups should allow ping using transparent vlan port

Additional info:
Comment 2 Miguel Angel Nieto 2023-03-09 10:59:44 UTC 
**************
instances
**************
+--------------------------------------+------------------------------------------+--------+-----------------------------------------------------+----------------------------------------+--------------------+
| ID                                   | Name                                     | Status | Networks                                            | Image                                  | Flavor             |
+--------------------------------------+------------------------------------------+--------+-----------------------------------------------------+----------------------------------------+--------------------+
| 68459f1c-8a3e-471a-a3bb-3c1249c56d59 | tempest-TestNfvOffload-server-1622698950 | ACTIVE | mellanox-vlan-provider=192.168.39.81, 30.30.220.139 | rhel-guest-image-8.7-1660.x86_64.qcow2 | nfv_qe_base_flavor |
| 0d900fa1-2c91-42e5-848e-feca82d2641c | tempest-TestNfvOffload-server-60978755   | ACTIVE | mellanox-vlan-provider=192.168.39.76, 30.30.220.174 | rhel-guest-image-8.7-1660.x86_64.qcow2 | nfv_qe_base_flavor |
+--------------------------------------+------------------------------------------+--------+-----------------------------------------------------+----------------------------------------+--------------------+

**************
ports
**************
(overcloud) [stack@undercloud-0 ~]$ openstack port list
+--------------------------------------+-------------------------------+-------------------+------------------------------------------------------------------------------+--------+
| ID                                   | Name                          | MAC Address       | Fixed IP Addresses                                                           | Status |
+--------------------------------------+-------------------------------+-------------------+------------------------------------------------------------------------------+--------+
| 00210a5e-3cdd-44b0-8a4d-c04afa93f212 |                               | fa:16:3e:c8:b0:26 | ip_address='30.30.220.254', subnet_id='e8037186-e02a-4314-84f1-ad0699b6c37d' | ACTIVE |
| 3d7706d6-f147-49fb-8fc8-8c9cbf3946ee |                               | fa:16:3e:19:41:fb | ip_address='60.60.220.100', subnet_id='3366d4a6-818b-49dd-95d8-07378555ac4a' | DOWN   |
| 87c08021-4851-400b-adb9-3c3a1d972ed1 |                               | fa:16:3e:e7:df:19 | ip_address='60.60.220.254', subnet_id='3366d4a6-818b-49dd-95d8-07378555ac4a' | ACTIVE |
| a805bd92-86eb-4058-852b-23da6ea59c20 | tempest-port-smoke-372172716  | fa:16:3e:09:f8:74 | ip_address='30.30.220.139', subnet_id='e8037186-e02a-4314-84f1-ad0699b6c37d' | ACTIVE |
| bb1ead02-f3e4-4163-a7d0-3e65ceee7c04 |                               | fa:16:3e:38:be:b3 | ip_address='192.168.39.86', subnet_id='b1f29391-6757-4150-877d-db0b56d14541' | ACTIVE |
| cc10a8bc-a370-4c28-865b-f0482ba7c23b |                               | fa:16:3e:6b:84:d3 | ip_address='192.168.39.81', subnet_id='b1f29391-6757-4150-877d-db0b56d14541' | N/A    |
| e0fac846-2c55-46f4-8f61-d91658b66bd1 |                               | fa:16:3e:15:42:48 | ip_address='30.30.220.100', subnet_id='e8037186-e02a-4314-84f1-ad0699b6c37d' | DOWN   |
| fa4b1771-26f9-432a-8ee2-ceb7a3f393f2 | tempest-port-smoke-1509015227 | fa:16:3e:56:4d:b9 | ip_address='30.30.220.174', subnet_id='e8037186-e02a-4314-84f1-ad0699b6c37d' | ACTIVE |
| fe506ffe-dc18-4d30-a4c1-2642fb0f4cea |                               | fa:16:3e:81:ea:8a | ip_address='192.168.39.76', subnet_id='b1f29391-6757-4150-877d-db0b56d14541' | N/A    |
+--------------------------------------+-------------------------------+-------------------+------------------------------------------------------------------------------+--------+

**************
security groups
**************
| security_groups                     | name='tempest-TestNfvOffload-1465019832' 

(overcloud) [stack@undercloud-0 ~]$ openstack security group show tempest-TestNfvOffload-1465019832 --fit-width
+-----------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field           | Value                                                                                                                                                                                         |
+-----------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| created_at      | 2023-03-09T10:47:36Z                                                                                                                                                                          |
| description     | tempest-TestNfvOffload-1465019832 description                                                                                                                                                 |
| id              | a68bc293-eb31-4b06-b58e-7d3f8df2210b                                                                                                                                                          |
| name            | tempest-TestNfvOffload-1465019832                                                                                                                                                             |
| project_id      | 423f9b586f234a10a1ce5d9a70acbfc7                                                                                                                                                              |
| revision_number | 3                                                                                                                                                                                             |
| rules           | created_at='2023-03-09T10:47:36Z', direction='egress', ethertype='IPv6', id='29a0c577-d1be-46d3-8852-cba32b93ecfc', standard_attr_id='2449', updated_at='2023-03-09T10:47:36Z'                |
|                 | created_at='2023-03-09T10:47:36Z', direction='ingress', ethertype='IPv4', id='60b041ca-11eb-4d7a-8b48-4a0d7ad3211b', port_range_max='22', port_range_min='22', protocol='tcp',                |
|                 | standard_attr_id='2452', updated_at='2023-03-09T10:47:36Z'                                                                                                                                    |
|                 | created_at='2023-03-09T10:47:36Z', direction='ingress', ethertype='IPv4', id='6a57b883-dfe1-4361-8f00-bdc070b81b12', protocol='icmp', standard_attr_id='2455',                                |
|                 | updated_at='2023-03-09T10:47:36Z'                                                                                                                                                             |
|                 | created_at='2023-03-09T10:47:36Z', direction='egress', ethertype='IPv4', id='e677f35b-ac97-4334-911c-19ca36c10e0c', standard_attr_id='2446', updated_at='2023-03-09T10:47:36Z'                |
| stateful        | True                                                                                                                                                                                          |
| tags            | []                                                                                                                                                                                            |
| updated_at      | 2023-03-09T10:47:36Z                                                                                                                                                                          |
+-----------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

**************
vms interfaces
**************
[cloud-user@tempest-testnfvoffload-server-1622698950 ~]$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc mq state UP group default qlen 1000
    link/ether fa:16:3e:09:f8:74 brd ff:ff:ff:ff:ff:ff
    altname enp4s0
    inet 30.30.220.139/24 brd 30.30.220.255 scope global dynamic noprefixroute eth0
       valid_lft 43095sec preferred_lft 43095sec
    inet6 fe80::f816:3eff:fe09:f874/64 scope link 
       valid_lft forever preferred_lft forever
3: eth0.38@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 8996 qdisc noqueue state UP group default qlen 1000
    link/ether fa:16:3e:09:f8:74 brd ff:ff:ff:ff:ff:ff
    inet 60.60.220.102/24 scope global eth0.38
       valid_lft forever preferred_lft forever
    inet6 fe80::f816:3eff:fe09:f874/64 scope link 
       valid_lft forever preferred_lft forever

[cloud-user@tempest-testnfvoffload-server-60978755 ~]$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc mq state UP group default qlen 1000
    link/ether fa:16:3e:56:4d:b9 brd ff:ff:ff:ff:ff:ff
    altname enp4s0
    inet 30.30.220.174/24 brd 30.30.220.255 scope global dynamic noprefixroute eth0
       valid_lft 42849sec preferred_lft 42849sec
    inet6 fe80::f816:3eff:fe56:4db9/64 scope link 
       valid_lft forever preferred_lft forever
3: eth0.38@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 8996 qdisc noqueue state UP group default qlen 1000
    link/ether fa:16:3e:56:4d:b9 brd ff:ff:ff:ff:ff:ff
    inet 60.60.220.101/24 scope global eth0.38
       valid_lft forever preferred_lft forever
    inet6 fe80::f816:3eff:fe56:4db9/64 scope link 
       valid_lft forever preferred_lft forever

**************
ping
**************
[cloud-user@tempest-testnfvoffload-server-60978755 ~]$ ping 30.30.220.139
PING 30.30.220.139 (30.30.220.139) 56(84) bytes of data.
64 bytes from 30.30.220.139: icmp_seq=1 ttl=64 time=5.32 ms
64 bytes from 30.30.220.139: icmp_seq=2 ttl=64 time=1.08 ms

[cloud-user@tempest-testnfvoffload-server-60978755 ~]$ ping 60.60.220.102
PING 60.60.220.102 (60.60.220.102) 56(84) bytes of data.
From 60.60.220.101 icmp_seq=1 Destination Host Unreachable
From 60.60.220.101 icmp_seq=2 Destination Host Unreachable
From 60.60.220.101 icmp_seq=3 Destination Host Unreachable

**************
flows
**************
compute0
ufid:e9b46645-20d1-413c-a061-c06b6a9705ac, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=192.168.39.0/255.255.255.192,dst=192.168.39.81,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0)), packets:110, bytes:10587, used:0.050s, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x186)
ufid:355e6960-5718-465b-9052-b115d5782bff, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:82:19:bf,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:7bd7efd2-29d6-4443-b3a2-34f9e7b0cba9, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:6a:1f:96,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:ba2b7c02-8a4c-432e-84f9-f63ee2bc7f47, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:0b:21:54,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:af1cca37-adac-434c-a1e2-528fa9c7347e, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:2c:5e:04,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:db5da87a-602b-4f4e-bd39-90e2fc1e7bda, skb_priority(0/0),skb_mark(0/0),ct_state(0x22/0x3e),ct_zone(0/0),ct_mark(0/0x3),ct_label(0/0),recirc_id(0x186),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.139,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:109, bytes:10517, used:0.050s, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:09:f8:74)),set(ipv4(ttl=63)),ct(zone=9),recirc(0x188)
ufid:ecd4e51d-aab2-41a4-be1f-ab821a3963e9, skb_priority(0/0),skb_mark(0/0),ct_state(0x22/0x3e),ct_zone(0/0),ct_mark(0/0x1),ct_label(0/0),recirc_id(0x188),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:09:f8:74),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.139,proto=6,tos=0/0,ttl=0/0,frag=no),tcp(src=0/0,dst=22), packets:108, bytes:10444, used:0.050s, offloaded:yes, dp:tc, actions:ens2f1np1_0
ufid:3f4e368d-9f92-44ce-9e1f-4e6df55bdb06, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.139,dst=0.0.0.0/0.0.0.0,proto=6,tos=0/0,ttl=0/0,frag=no),tcp(src=0/0,dst=0/0), packets:106, bytes:11885, used:0.050s, offloaded:yes, dp:tc, actions:ct(zone=9),recirc(0x189)
ufid:6ce6fe71-4869-40ce-9384-e36930203cf7, skb_priority(0/0),skb_mark(0/0),ct_state(0x2a/0x3e),ct_zone(0/0),ct_mark(0/0x3),ct_label(0/0),recirc_id(0x189),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.139,dst=192.168.39.1,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:106, bytes:11885, used:0.050s, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x18a)
ufid:64d1da8e-2648-4823-820e-f9a1c35e2ab5, skb_priority(0/0),skb_mark(0/0),ct_state(0x2a/0x3e),ct_zone(0/0),ct_mark(0/0x1),ct_label(0/0),recirc_id(0x18a),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58),eth_type(0x0800),ipv4(src=128.0.0.0/128.0.0.0,dst=192.168.39.0/255.255.255.192,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:106, bytes:11885, used:0.050s, offloaded:yes, dp:tc, actions:ct_clear,push_vlan(vid=39,pcp=0),mx-bond
ufid:77fd4377-f40e-4d1f-92bb-ac1767e65deb, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.163,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=b6:06:ec:f7:6a:78,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:739, bytes:48774, used:0.627s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:6bc25072-1da3-4065-b1b4-796ea64aa7fa, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.187,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=06:19:63:a8:05:68,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:737, bytes:48642, used:0.619s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:4e55b11b-38f5-49f8-880b-b49e45a99546, recirc_id(0),dp_hash(0/0),skb_priority(0/0),in_port(ens2f1np1_0),skb_mark(0/0),ct_state(0/0x3f),ct_zone(0/0),ct_mark(0/0x3),ct_label(0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0806),arp(sip=30.30.220.139,tip=30.30.220.254,op=1/0xff,sha=fa:16:3e:09:f8:74,tha=00:00:00:00:00:00), packets:0, bytes:0, used:never, dp:ovs, actions:userspace(pid=4294967295,slow_path(action))
ufid:210b15aa-7199-49f9-9e31-69f315a4a7c8, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.190,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=16:ff:bb:d7:38:4c,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:733, bytes:48378, used:0.644s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:7e481ed2-c531-4c6f-b56c-5512ab686fd8, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.188,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=f6:d4:ca:bb:fd:cf,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:735, bytes:48510, used:0.061s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))


compute1
ufid:49c15d28-f524-4033-acff-53d051c739e3, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:56:4d:b9,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x86dd),ipv6(src=::/::,dst=::/::,label=0/0,proto=0/0,tclass=0/0,hlimit=0/0,frag=no), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:drop
ufid:e9d42261-fd84-4851-9c99-9012242d2ac6, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:56:4d:b9,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:74, bytes:2516, used:0.480s, dp:tc, actions:drop
ufid:c9068675-ddcc-4c09-94e1-f755347a3acc, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:56:4d:b9,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.174,dst=0.0.0.0/0.0.0.0,proto=6,tos=0/0,ttl=0/0,frag=no),tcp(src=0/0,dst=0/0), packets:223, bytes:46147, used:2.270s, offloaded:yes, dp:tc, actions:ct(zone=9),recirc(0x1db)
ufid:7046c8f4-8221-43dc-8106-d055a222fefb, skb_priority(0/0),skb_mark(0/0),ct_state(0x2a/0x3e),ct_zone(0/0),ct_mark(0/0x3),ct_label(0/0),recirc_id(0x1db),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:56:4d:b9,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.174,dst=192.168.39.1,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:223, bytes:46147, used:2.270s, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x1dc)
ufid:12ee20ac-7c60-4435-a23e-797f1630603e, skb_priority(0/0),skb_mark(0/0),ct_state(0x2a/0x3e),ct_zone(0/0),ct_mark(0/0x1),ct_label(0/0),recirc_id(0x1dc),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58),eth_type(0x0800),ipv4(src=128.0.0.0/128.0.0.0,dst=192.168.39.0/255.255.255.192,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:223, bytes:46147, used:2.270s, offloaded:yes, dp:tc, actions:ct_clear,push_vlan(vid=39,pcp=0),mx-bond
ufid:67c56bbd-c8b6-4177-9399-aad29cf3092f, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=192.168.39.0/255.255.255.192,dst=192.168.39.76,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0)), packets:289, bytes:25365, used:2.270s, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x1d8)
ufid:75603f0f-74f6-4589-9f59-9c6405702bac, skb_priority(0/0),skb_mark(0/0),ct_state(0x22/0x3e),ct_zone(0/0),ct_mark(0/0x3),ct_label(0/0),recirc_id(0x1d8),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.174,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:288, bytes:25295, used:2.270s, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:56:4d:b9)),set(ipv4(ttl=63)),ct(zone=9),recirc(0x1da)
ufid:f40f76fd-08ed-44df-bd9d-3ed457d767d8, skb_priority(0/0),skb_mark(0/0),ct_state(0x22/0x3e),ct_zone(0/0),ct_mark(0/0x1),ct_label(0/0),recirc_id(0x1da),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:56:4d:b9),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.174,proto=6,tos=0/0,ttl=0/0,frag=no),tcp(src=0/0,dst=22), packets:287, bytes:25222, used:2.270s, offloaded:yes, dp:tc, actions:ens2f1np1_8
ufid:ee884518-122d-442c-9e5a-dfe9bcb17f55, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.185,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=fe:80:1f:07:be:54,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:9789, bytes:646074, used:0.694s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:ab7a6785-4219-49a4-94f4-75db33ff2b01, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.163,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=42:28:e0:09:95:c8,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:9796, bytes:646536, used:0.866s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:70b3c16a-2dfe-468a-ba3c-99485ec6e017, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.188,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=ce:68:be:e6:bd:1e,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:9790, bytes:646140, used:0.484s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:b405bbec-06ee-47f2-88b1-ed7ceae355a7, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.187,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=96:33:7f:cd:73:44,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:9800, bytes:646800, used:0.676s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
Comment 3 Miguel Angel Nieto 2023-03-09 11:08:05 UTC 
If i disable security groups:

(overcloud) [stack@undercloud-0 ~]$ openstack port set --no-security-group    --disable-port-security a805bd92-86eb-4058-852b-23da6ea59c20
(overcloud) [stack@undercloud-0 ~]$ openstack port set --no-security-group    --disable-port-security fa4b1771-26f9-432a-8ee2-ceb7a3f393f2

PING 60.60.220.102 (60.60.220.102) 56(84) bytes of data.
64 bytes from 60.60.220.102: icmp_seq=1 ttl=64 time=0.046 ms
64 bytes from 60.60.220.102: icmp_seq=2 ttl=64 time=0.036 ms
64 bytes from 60.60.220.102: icmp_seq=3 ttl=64 time=0.038 ms
64 bytes from 60.60.220.102: icmp_seq=4 ttl=64 time=0.038 ms

compute0
ufid:e9b46645-20d1-413c-a061-c06b6a9705ac, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=192.168.39.0/255.255.255.192,dst=192.168.39.81,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0)), packets:210, bytes:17587, used:1.460s, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x186)
ufid:ae8b9308-5791-4b70-a81f-728bc7cc7415, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=16.0.0.0/248.0.0.0,dst=192.168.39.81,proto=17,tos=0/0,ttl=104,frag=no),udp(src=0/0,dst=0/0)), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x186)
ufid:4eeb7cff-020f-4ec6-91c2-d492bc52e06e, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:56:4d:b9,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=0/0,tos=0/0,ttl=0/0,frag=no))), packets:57, bytes:6042, used:0.440s, offloaded:yes, dp:tc, actions:pop_vlan,ens2f1np1_0
ufid:60061bc3-f3e5-42bd-bfaa-742550f8b5ad, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:56:4d:b9,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00))), packets:0, bytes:0, used:never, dp:tc, actions:pop_vlan,ens2f1np1_0
ufid:65701f40-433c-4155-942f-75545c722117, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=16.0.0.0/248.0.0.0,dst=192.168.39.81,proto=17,tos=0/0,ttl=50,frag=no),udp(src=0/0,dst=0/0)), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x186)
ufid:768d6443-4af5-464c-ba98-e2119055b91c, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=32.0.0.0/240.0.0.0,dst=192.168.39.81,proto=17,tos=0/0,ttl=49,frag=no),udp(src=0/0,dst=0/0)), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x186)
ufid:1f079485-9445-436a-bbd3-dd7260bb8b8f, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=64.0.0.0/224.0.0.0,dst=192.168.39.81,proto=17,tos=0/0,ttl=49,frag=no),udp(src=0/0,dst=0/0)), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x186)
ufid:2e2ec036-bfce-4a81-9ee0-7d01192f29e0, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:56:4d:b9,dst=33:33:00:00:00:02),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x86dd),ipv6(src=::/::,dst=ff02::2,label=0/0,proto=58,tclass=0/0,hlimit=255,frag=no),icmpv6(type=133,code=0)), packets:0, bytes:0, used:never, dp:tc, actions:br-link0,pop_vlan,tap0903477e-80,ens2f1np1_0
ufid:355e6960-5718-465b-9052-b115d5782bff, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:82:19:bf,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:ba2b7c02-8a4c-432e-84f9-f63ee2bc7f47, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:0b:21:54,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:7bd7efd2-29d6-4443-b3a2-34f9e7b0cba9, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:6a:1f:96,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:af1cca37-adac-434c-a1e2-528fa9c7347e, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:2c:5e:04,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:set(eth(src=fa:16:3e:c8:b0:26)),pop_vlan,ens2f1np1_0
ufid:a498fce4-1a07-4c2e-b499-10b7342c4b4d, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=b8:f0:15:3f:8f:2e,dst=01:80:c2:00:00:0e),eth_type(0x88cc), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:drop
ufid:db5da87a-602b-4f4e-bd39-90e2fc1e7bda, skb_priority(0/0),skb_mark(0/0),ct_state(0x22/0x3e),ct_zone(0/0),ct_mark(0/0x3),ct_label(0/0),recirc_id(0x186),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.139,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:209, bytes:17517, used:1.460s, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:09:f8:74)),set(ipv4(ttl=63)),ens2f1np1_0
ufid:1ba69df7-8050-4875-b649-43b3b8911839, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0x186),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.139,proto=17,tos=0/0,ttl=104,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:09:f8:74)),set(ipv4(ttl=103)),ens2f1np1_0
ufid:1b6ea167-046b-41ef-a29a-bd31deb3505c, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0x186),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.139,proto=17,tos=0/0,ttl=50,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:09:f8:74)),set(ipv4(ttl=49)),ens2f1np1_0
ufid:73679b5d-bc6b-4712-b8c3-65e8fc165b84, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0x186),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:54:00:18:73:58,dst=fa:16:3e:6b:84:d3),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.139,proto=17,tos=0/0,ttl=49,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:09:f8:74)),set(ipv4(ttl=48)),ens2f1np1_0
ufid:22f855ff-3f0f-4eee-9c33-74063d4516b8, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0x18a),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58),eth_type(0x0800),ipv4(src=128.0.0.0/128.0.0.0,dst=192.168.39.0/255.255.255.192,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:21, bytes:1386, used:1.460s, offloaded:yes, dp:tc, actions:ct_clear,push_vlan(vid=39,pcp=0),mx-bond
ufid:73aac862-8759-49ae-9cef-a1c00a401df7, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0x18a),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:6b:84:d3,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=30.30.220.139,dst=0.0.0.0/0.0.0.0,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:1, bytes:76, used:8.180s, offloaded:yes, dp:tc, actions:ct(commit,zone=4,nat(src=192.168.39.81)),recirc(0x19b)
ufid:3374ac9d-c37d-44a6-bd53-ffc883ca4be5, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:56:4d:b9),eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=32.0.0.0/224.0.0.0,proto=0/0,tos=0/0,ttl=0/0,frag=no)), packets:57, bytes:5814, used:0.440s, offloaded:yes, dp:tc, actions:push_vlan(vid=36,pcp=0),mx-bond
ufid:9cec711e-af6e-400b-931a-f9fb7be41a99, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:56:4d:b9),eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:push_vlan(vid=36,pcp=0),mx-bond
ufid:150d4763-b821-4323-ab78-1d519d288275, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.139,dst=192.168.39.1,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:21, bytes:1386, used:1.460s, offloaded:yes, dp:tc, actions:set(eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x18a)
ufid:cc31bc29-f9b8-40fd-b6c9-3fc2925ca24d, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.139,dst=16.0.0.0/248.0.0.0,proto=17,tos=0/0,ttl=64,frag=no),udp(src=0/0,dst=0/0), packets:1, bytes:76, used:8.180s, offloaded:yes, dp:tc, actions:set(eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x18a)
ufid:5ea25805-b0ab-4b98-be7d-753b7fe2f680, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.139,dst=32.0.0.0/240.0.0.0,proto=17,tos=0/0,ttl=64,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:set(eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x18a)
ufid:5deaf983-7e57-49ea-bea1-3041a965b1e1, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.139,dst=64.0.0.0/224.0.0.0,proto=17,tos=0/0,ttl=64,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:tc, actions:set(eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x18a)
ufid:093486f9-726d-4f68-91e3-f9f15ed81e86, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0x19b),dp_hash(0/0),in_port(ens2f1np1_0),packet_type(ns=0/0,id=0/0),eth(src=fa:16:3e:6b:84:d3,dst=52:54:00:18:73:58),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/128.0.0.0,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:1, bytes:76, used:8.180s, offloaded:yes, dp:tc, actions:ct_clear,push_vlan(vid=39,pcp=0),mx-bond
ufid:210b15aa-7199-49f9-9e31-69f315a4a7c8, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.190,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=16:ff:bb:d7:38:4c,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:1314, bytes:86724, used:0.221s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:4e55b11b-38f5-49f8-880b-b49e45a99546, recirc_id(0),dp_hash(0/0),skb_priority(0/0),in_port(ens2f1np1_0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3e:c8:b0:26),eth_type(0x0806),arp(sip=30.30.220.139,tip=30.30.220.254,op=1/0xff,sha=fa:16:3e:09:f8:74,tha=00:00:00:00:00:00), packets:0, bytes:0, used:never, dp:ovs, actions:userspace(pid=4294967295,slow_path(action))
ufid:7e481ed2-c531-4c6f-b56c-5512ab686fd8, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.188,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=f6:d4:ca:bb:fd:cf,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:1309, bytes:86394, used:0.414s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:77fd4377-f40e-4d1f-92bb-ac1767e65deb, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.163,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=b6:06:ec:f7:6a:78,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:1319, bytes:87054, used:0.484s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:6bc25072-1da3-4065-b1b4-796ea64aa7fa, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.187,dst=192.168.32.185,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=06:19:63:a8:05:68,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag=no),udp(src=0/0,dst=3784), packets:1318, bytes:86988, used:0.597s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))


compute1
ufid:12ee20ac-7c60-4435-a23e-797f1630603e, skb_priority(0/0),skb_mark(0/0),ct_state(0x2a/0x3e),ct_zone(0/0),ct_mark(0/0x1),ct_label(0/0),recirc_id(0x1dc),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0
/0),eth(src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58),eth_type(0x0800),ipv4(src=128.0.0.0/128.0.0.0,dst=192.168.39.0/255.255.255.192,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:471, bytes:102859, used:0.520s, off
loaded:yes, dp:tc, actions:ct_clear,push_vlan(vid=39,pcp=0),mx-bond
ufid:1a51cca2-b6e3-4578-a878-2d75fc120b4b, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0x1dc),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(
src=fa:16:3e:81:ea:8a,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=30.30.220.174,dst=0.0.0.0/0.0.0.0,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:1, bytes:76, used:5.231s, offloaded:yes, dp:
tc, actions:ct(commit,zone=4,nat(src=192.168.39.76)),recirc(0x1ee)
ufid:49c15d28-f524-4033-acff-53d051c739e3, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=
fa:16:3e:56:4d:b9,dst=33:33:00:00:00:02),eth_type(0x86dd),ipv6(src=::/::,dst=ff02::2,label=0/0,proto=58,tclass=0/0,hlimit=255,frag=no),icmpv6(type=133,code=0), packets:0, bytes:0, used:never, dp:tc, actions:tap0
903477e-80,push_vlan(vid=36,pcp=0),br-link0,mx-bond
ufid:cacf7534-cc57-4183-a922-323e41ef5fa1, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=
fa:16:3e:56:4d:b9,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=32.0.0.0/224.0.0.0,proto=0/0,tos=0/0,ttl=0/0,frag=no)), packets:55, bytes:5610, us
ed:0.520s, offloaded:yes, dp:tc, actions:push_vlan(vid=36,pcp=0),mx-bond
ufid:8cb52db6-9e78-45fd-b27f-ca6174f0c460, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(src=
fa:16:3e:56:4d:b9,dst=fa:16:3e:09:f8:74),eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/00:00:00:00:00:00,tha=00:00:00:00:00:0
0/00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:tc, actions:push_vlan(vid=36,pcp=0),mx-bond
ufid:9e477ef6-c040-47a2-a6ad-4d0879032e75, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(sr
c=fa:16:3e:56:4d:b9,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.174,dst=192.168.39.1,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:122, bytes:19604, used:0.520s, offloaded:yes, dp:
tc, actions:set(eth(src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x1dc)
ufid:cc101b49-64a6-4eef-9151-7072f81ca9e0, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(sr
c=fa:16:3e:56:4d:b9,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.174,dst=32.0.0.0/240.0.0.0,proto=17,tos=0/0,ttl=64,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:
tc, actions:set(eth(src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x1dc)
ufid:bff404a5-cb09-47be-9cba-271fc77cfc7a, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(sr
c=fa:16:3e:56:4d:b9,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.174,dst=16.0.0.0/248.0.0.0,proto=17,tos=0/0,ttl=64,frag=no),udp(src=0/0,dst=0/0), packets:1, bytes:76, used:5.230s, offloaded:yes, d
p:tc, actions:set(eth(src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x1dc)
ufid:df9c0e73-dc1a-4d94-9ec7-5db75a4e220e, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(sr
c=fa:16:3e:56:4d:b9,dst=fa:16:3e:c8:b0:26),eth_type(0x0800),ipv4(src=30.30.220.174,dst=64.0.0.0/224.0.0.0,proto=17,tos=0/0,ttl=64,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:
tc, actions:set(eth(src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58)),set(ipv4(ttl=63)),ct(zone=4,nat),recirc(0x1dc)
ufid:c37ddf6a-9bbc-4352-a7db-6bccc063a84f, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0x1ee),dp_hash(0/0),in_port(ens2f1np1_8),packet_type(ns=0/0,id=0/0),eth(
src=fa:16:3e:81:ea:8a,dst=52:54:00:18:73:58),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/128.0.0.0,proto=0/0,tos=0/0,ttl=0/0,frag=no), packets:1, bytes:76, used:5.230s, offloaded:yes, dp:tc, actions:ct
_clear,push_vlan(vid=39,pcp=0),mx-bond
ufid:67c56bbd-c8b6-4177-9399-aad29cf3092f, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:5
4:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=192.168.39.0/255.255.255.192,dst=192.168.39.76,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0)), pack
ets:547, bytes:43973, used:0.520s, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x1d8)
ufid:730c6103-461c-41fa-a251-381912b8da61, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa
:16:3e:09:f8:74,dst=fa:16:3e:56:4d:b9),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=0/0,tos=0/0,ttl=0/0,
frag=no))), packets:55, bytes:5830, used:0.520s, offloaded:yes, dp:tc, actions:pop_vlan,ens2f1np1_8
ufid:cdf6d07c-db8f-4835-94ca-63d716e6daad, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:5
4:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=32.0.0.0/240.0.0.0,dst=192.168.39.76,proto=17,tos=0/0,ttl=49,frag=no),udp(src=0/0,dst=0/0)), packets:0, by
tes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x1d8)
ufid:5d634277-2d9e-45e2-8627-5d7c93e7cd31, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=fa:1
6:3e:09:f8:74,dst=fa:16:3e:56:4d:b9),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x8100),vlan(vid=38,pcp=0),encap(eth_type(0x0806),arp(sip=0.0.0.0/0.0.0.0,tip=0.0.0.0/0.0.0.0,op=0/0,sha=00:00:00:00:00:00/
00:00:00:00:00:00,tha=00:00:00:00:00:00/00:00:00:00:00:00))), packets:0, bytes:0, used:never, dp:tc, actions:pop_vlan,ens2f1np1_8
ufid:cd222d84-92d8-4805-a093-cfdd73437573, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:5
4:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=16.0.0.0/248.0.0.0,dst=192.168.39.76,proto=17,tos=0/0,ttl=49,frag=no),udp(src=0/0,dst=0/0)), packets:0, by
tes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x1d8)
ufid:a5deeadc-a011-44aa-9c0c-111c19c6de79, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:5
4:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=64.0.0.0/224.0.0.0,dst=192.168.39.76,proto=17,tos=0/0,ttl=49,frag=no),udp(src=0/0,dst=0/0)), packets:0, by
tes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x1d8)
ufid:8bb04115-c839-4c70-9001-a496729251c4, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),recirc_id(0),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(src=52:5
4:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x8100),vlan(vid=39,pcp=0),encap(eth_type(0x0800),ipv4(src=16.0.0.0/248.0.0.0,dst=192.168.39.76,proto=17,tos=0/0,ttl=105,frag=no),udp(src=0/0,dst=0/0)), packets:0, b
ytes:0, used:never, offloaded:yes, dp:tc, actions:pop_vlan,ct(zone=4,nat),recirc(0x1d8)
ufid:75603f0f-74f6-4589-9f59-9c6405702bac, skb_priority(0/0),skb_mark(0/0),ct_state(0x22/0x3e),ct_zone(0/0),ct_mark(0/0x3),ct_label(0/0),recirc_id(0x1d8),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),
eth(src=52:54:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.174,proto=6,tos=0/0,ttl=64,frag=no),tcp(src=0/0,dst=0/0), packets:546, bytes:43903, used:0.520s, offloaded
:yes, dp:tc, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:56:4d:b9)),set(ipv4(ttl=63)),ens2f1np1_8
ufid:f7b5ca09-5205-4851-a0fd-c96826ac04aa, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0x1d8),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(sr
c=52:54:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.174,proto=17,tos=0/0,ttl=49,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:tc,
 actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:56:4d:b9)),set(ipv4(ttl=48)),ens2f1np1_8
ufid:5537c127-5835-4182-a491-b399cac033f8, skb_priority(0/0),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),recirc_id(0x1d8),dp_hash(0/0),in_port(mx-bond),packet_type(ns=0/0,id=0/0),eth(sr
c=52:54:00:18:73:58,dst=fa:16:3e:81:ea:8a),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=30.30.220.174,proto=17,tos=0/0,ttl=105,frag=no),udp(src=0/0,dst=0/0), packets:0, bytes:0, used:never, offloaded:yes, dp:tc
, actions:ct_clear,set(eth(src=fa:16:3e:c8:b0:26,dst=fa:16:3e:56:4d:b9)),set(ipv4(ttl=104)),ens2f1np1_8
ufid:4a10315d-769c-48ba-9499-55b81fc4e977, recirc_id(0),dp_hash(0/0),skb_priority(0/0),in_port(mx-bond),skb_mark(0/0),ct_state(0/0),ct_zone(0/0),ct_mark(0/0x2),ct_label(0/0),eth(src=fa:16:3e:09:f8:74,dst=fa:16:3
e:c8:b0:26),eth_type(0x8100),vlan(vid=36,pcp=0),encap(eth_type(0x0806),arp(sip=30.30.220.139,tip=30.30.220.254,op=1/0xff,sha=fa:16:3e:09:f8:74,tha=00:00:00:00:00:00)), packets:0, bytes:0, used:never, dp:ovs, act
ions:userspace(pid=4294967295,slow_path(action))
ufid:70b3c16a-2dfe-468a-ba3c-99485ec6e017, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.188,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),c
t_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=ce:68:be:e6:bd:1e,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag
=no),udp(src=0/0,dst=3784), packets:10360, bytes:683760, used:0.258s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:b405bbec-06ee-47f2-88b1-ed7ceae355a7, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.187,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),c
t_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=96:33:7f:cd:73:44,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag
=no),udp(src=0/0,dst=3784), packets:10372, bytes:684552, used:0.714s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:ee884518-122d-442c-9e5a-dfe9bcb17f55, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.185,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),c
t_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=fe:80:1f:07:be:54,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag
=no),udp(src=0/0,dst=3784), packets:10358, bytes:683628, used:0.760s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
ufid:ab7a6785-4219-49a4-94f4-75db33ff2b01, recirc_id(0),dp_hash(0/0),skb_priority(0/0),tunnel(tun_id=0x0,src=192.168.32.163,dst=192.168.32.190,ttl=0/0,flags(-df+csum+key)),in_port(genev_sys_6081),skb_mark(0/0),c
t_state(0/0),ct_zone(0/0),ct_mark(0/0),ct_label(0/0),eth(src=42:28:e0:09:95:c8,dst=00:00:00:00:00:00/00:00:00:00:00:00),eth_type(0x0800),ipv4(src=0.0.0.0/0.0.0.0,dst=0.0.0.0/0.0.0.0,proto=17,tos=0/0,ttl=0/0,frag
=no),udp(src=0/0,dst=3784), packets:10364, bytes:684024, used:0.412s, dp:ovs, actions:userspace(pid=4294967295,slow_path(bfd))
Comment 5 Miro Tomaska 2023-03-09 14:15:16 UTC 
As I commented in 16.2 BZ[1]. Please add --allowed-address and this should work.
Is this a new test? or do we have regression here?
We test "ping between VMs with transparent vlans' upstream. See these two tests [2]


[1]https://bugzilla.redhat.com/show_bug.cgi?id=2167839#c4
[2]https://github.com/openstack/neutron-tempest-plugin/blob/master/neutron_tempest_plugin/scenario/test_vlan_transparency.py#L178-183
Comment 6 Miguel Angel Nieto 2023-03-09 15:25:36 UTC 
This is new, we have just introduced security groups in offload testcases

I already tried --allowed-address, but it didnt work, i commented in the description of the testcase
https://bugzilla.redhat.com/show_bug.cgi?id=2176775#c0

*****************************
Create allowed-address ports
*****************************
openstack port create --network dc3c361e-da84-4391-b5de-20620e3702d6 --allowed-address mac-address=fa:16:3e:56:cb:fe,ip-address=60.60.220.102/24  7f44fda8-74ee-43ae-a334-5e9387653bc0
Comment 24 arn 2023-04-18 08:19:23 UTC 
cleared need info flag by mistake!. Hence resetting it.
Comment 28 Miguel Angel Nieto 2023-04-29 00:19:28 UTC 
When using security groups it is needed to execute the following command on the parent ports in which the transparent vlan ports are configured. Once it is configured, there is connectivity

openstack port set --allowed-address mac-address=fa:16:3e:94:1f:d4,ip-address=60.60.220.104/24 b8855403-c019-4daf-93b0-0f318b8f34fa # 30.30.220.198
openstack port set --allowed-address mac-address=fa:16:3e:92:0c:18,ip-address=60.60.220.103/24 7e20c645-a545-41e7-8553-fdd7a4301bda # 30.30.220.191
openstack port set --allowed-address mac-address=fa:16:3e:a1:11:a4,ip-address=60.60.220.102/24 9a4cd7b9-293e-44c8-a063-789ef3ef120d # 30.30.220.144
openstack port set --allowed-address mac-address=fa:16:3e:1c:fb:24,ip-address=60.60.220.101/24 56957f0c-2aff-45d5-9203-5e199056dcc4 # 30.30.220.156


Closing the bug.
Comment 29 Miguel Angel Nieto 2023-07-05 07:37:46 UTC 
I am reopening this bug

I have seen that there is a corner case in which transparent vlan is not working even when allowed-address is configured.

I have tested that this scenarios are working:

1. VM with a single offload port connected to a geneve network and a transparent vlan port
2. VM with a single offload port connected to a vlan network and a transparent vlan port

But this scenario is failing

1. VM with 2 offload ports: geneve and vlan. Transparent vlan is connected to vlan port

I see that there is no ping in transparent vlan network even if allowed-address is configured. If I disable security groups and port security, then ping starts working
Comment 32 Slawek Kaplonski 2023-07-20 06:15:08 UTC 
Thx for that additional info Miguel. I will check that.
@
Comment 34 Slawek Kaplonski 2023-07-20 09:00:26 UTC 
I just did test of the scenario described in https://bugzilla.redhat.com/show_bug.cgi?id=2176775#c29 but on the single node devstack and without hardware offload and it works fine for both interfaces in VMs (vlan network and geneve network).
@Miguel Can You maybe provide me environment with reproduced issue? I would like to check there what is not working there and maybe that way it will be easier to find a bug.
Comment 35 Miguel Angel Nieto 2023-07-25 14:51:08 UTC 
@Slawek I am preparing the environment, i will contact you when it is ready.
Comment 36 Miguel Angel Nieto 2023-07-26 15:46:09 UTC 
I was configuring a rule for icmp only for the first port, so when the transparent vlan was configured there, ping worked

But when it was configured in the second port it failed because icmp rule was not configured in the parent port.

Closing as not a bug.
Note You need to log in before you can comment on or make changes to this bug.